Attack Surface Management – you're (probably) doing it wrong
medium.com